Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Account status changes to Manually Provisioned after removing entitlement in ARS

Kevin
New Contributor
New Contributor

Hi,

We are onboarding an integration between Saviynt and SuccessFactors to manage group access in SuccessFactors.

During testing we have noticed that when an entitlement is removed through ARS request and the provisioning job is run, that the account status changes to 'Manually Provisioned'.

We were not sure why the entitlement task would update the account status, or if there is a way to prevent that. The account status corrects itself after running the account import job.

This is the Remove Access Policy:

{
"call": [
{
"name": "DynamicGroups",
"connection": "SuccessFactors",
"url": "https://api8preview.sapsf.com/odata/v2/updateStaticGroup?groupId=${entitlementValue.entitlementID}L&...}'",
"httpMethod": "GET",
"httpHeaders": {
"Accept": "application/json",
"Authorization": "${access_token}"
},
"httpContentType": "application/json",
"successResponses": {
"statusCode": [
200
]
},
"unsuccessResponses": {
"statusCode": [
400
]
}
}
]
}

Thanks

3 REPLIES 3

RakeshMG
Saviynt Employee
Saviynt Employee

Is their any tasks getting created for update account and can you please share update account Json.


​Regards

Rakesh M Goudar

Kevin
New Contributor
New Contributor

Hi Rakesh,

There is only a task created for Remove Access when requesting to remove an entitlement from ARS.

After the provisioning job runs, the task is marked complete and the entitlement is removed, but the account status becomes Manually Provisioned.

Here is the update account json:

{
    "call": [
       {
          "name": "call1",
          "connection": "SuccessFactors",
          "httpMethod": "POST",
          "httpParams": "{\"status\":\"${user.statuskey==null?'':user.statuskey==1?'Active':user.statuskey==0?'Inactive':''}\",\"userId\":\"${user.customproperty51!=null?user.customproperty51:''}\",\"username\":\"${user.username!=null?user.username:''}\",\"firstName\":\"${user.firstname!=null?user.firstname:''}\",\"lastName\":\"${user.lastname!=null?user.lastname:''}\",\"suffix\":\"${user.customproperty13!=null?user.customproperty13:''}\",\"nickname\":\"${user.preferedFirstName!=null?user.preferedFirstName:''}\",\"mi\":\"${user.middlename!=null?user.middlename:''}\",\"gender\":\"${user.customproperty14!=null?user.customproperty14:''}\",\"email\":\"${user.email!=null?user.email:''}\",\"division\":\"${user.customproperty53!=null?user.customproperty53:''}\",\"department\":\"${user.customproperty54!=null?user.customproperty54:''}\",\"location\":\"${user.customproperty55!=null?user.customproperty55:''}\",\"jobCode\":\"${user.customproperty56!=null?user.customproperty56:''}\",\"timeZone\":\"US/Eastern\",\"hireDate\":\"${user.customproperty11}\",\"companyExitDate\":\"${user.enddate}\",\"empId\":\"${user.employeeid!=null?user.employeeid:''}\",\"title\":\"${user.jobcodedesc!=null?user.jobcodedesc:''}\",\"addressLine1\":\"${user.customproperty16!=null?user.customproperty16:''}\",\"city\":\"${user.customproperty57!=null?user.customproperty57:''}\",\"state\":\"${user.customproperty58!=null?user.customproperty58:''}\",\"zipCode\":\"${user.customproperty18!=null?user.customproperty18:''}\",\"country\":\"${user.customproperty59!=null?user.customproperty59:''}\",\"custom01\":\"${user.customproperty60!=null?user.customproperty60:''}\",\"defaultLocale\":\"en_US\",\"rehiredatePIF\":\"${user.customproperty11}\",\"flagstatecountryPIF\":\"${user.customproperty61!=null?user.customproperty61:''}\",\"stripesPIF\":\"${user.customproperty62!=null?user.customproperty62:''}\",\"shipboardshoresidePIF\":\"${user.customproperty37==null?'':user.customproperty37=='PeopleSoft'?'SS':user.customproperty37=='JDEdwards'?'SB':''}\",\"brandIdentifierPIF\":\"${user.orgunitid!=null?user.orgunitid:''}\",\"onoffshipflagPIF\":\"${user.customproperty63!=null?user.customproperty63:''}\",\"leaderflagPIF\":\"${user.customproperty64!=null?ser.customproperty64:''}\",\"countrypassportPIF\":\"${user.customproperty65!=null?user.customproperty65:''}\",\"signondatePIF\":\"${user.customproperty11}\",\"signoffdatePIF\":\"${user.customproperty11==null?null: '\"Date('+(new java.text.SimpleDateFormat('yyyy-MM-dd').parse(user.customproperty11)).toInstant().toEpochMilli()+')\"'}\",\"manager\":{\"__metadata\":{\"uri\":\"User('${manager!=null?manager:''}')\"}},\"hr\":{\"__metadata\":{\"uri\":\"User('${hr!=null?hr:''}')\"}}}",
          "httpHeaders": {
             "x-http-method": "MERGE",
             "Accept": "application/json",
             "Authorization": "${access_token}"
          },
          "httpContentType": "application/json",
          "successResponses": {
             "statusCode": [
                200
             ]
          }
       }
    ]
 }
 
Thanks

Kevin
New Contributor
New Contributor

Hi @RakeshMG 

I responded to your reply with the update account json.

We do not see a task created for account update, only a task for the Remove access; but it updates the account status to Manually Provisioned after the task is processed.

Let me know if you need any other information. Thanks